Initial curated RepoPulse source from 2524ccc3c1c27739996dccb2b7992989f88cd26d

backend/tests/test_reporting.py

@@ -0,0 +1,12 @@
+from app.reporting import content_disposition, safe_report_filename
+
+
+def test_report_filenames_are_safe_and_support_unicode() -> None:
+    filename = safe_report_filename('repo/evil\r\n"<é>', "html")
+    disposition = content_disposition(filename)
+
+    assert filename.startswith("repopulse-repo_evil___")
+    assert "\r" not in disposition
+    assert "\n" not in disposition
+    assert 'filename="' in disposition
+    assert "filename*=UTF-8''" in disposition